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1 . A method for preserving the integrity of a negotiation comprising the 
steps of: 

5d) providing an architecture which include a center A, 
and a plurality of users B;sub.2,..., B.sub.n, 

b) generating for each user B.subJ an input X.subJ, 

c) inputting eadi user's input X.sub J to ttie center A, 

d) computing and publishing a function F(X.sub.1,X.sub,2,..„X.8Ub-n) by the center 
10 A based on the input messs^es it receives, 

e) each user B.sub.l (1<» n) communicating with the center A exdusively, and 

f) publishing by center A additional information whidt lets each of the users verify 
that F was computed correctly , and preventing a coalition of any one subset of the 
users from learning <i) anything which cannot be computed Just from the output 

15 of the function. F(X.subJ,,,.,X.sub.n). and from ttieir own inputs, and (ii) 
information about the inpute of other users. 

2. The method of Claim 1 for computing the output of a sealed bki 
auction, where ttie users are bidders ami the center is the auctioneer, and wherein 

20 the input X.sub J is the bid of bidder B.sub.i» and an output of F is the identity of the 
winning bidder and the amount he has to pay. 
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- - 3. (amended) The method accoiding to [any one of claims 1 or 2] daim 1. for 
cOTiputing the output of a sealed bid auction, where the users are bidders and the 
center is the auctioneer, and wherein the input X.8ub.i is the bid of bidder B.sub.i, and 
an output of F is the identity of the winning bidder and the amount to l» paid, and 
wherein ttie center only makes disclosure to the winning bidder, while all other bidders 
being able to verify that the auctkm was computed corredly, but do not learn any other 
information. 

- - 4. (Amended) The method according to [any one of clain« 1 , 2 or 3] claim 1, 
for first price auctions, where the output of F Is (B.subJ, X.sub.j), where X.sub.j is 
greater «r equal to any one X.8ub.i for 1 <=i «sn. 

- - 5. (Amended) The method according to [any one of daims 1, 2 or 3] daim 1, 
for second price audions (Vidcrey audions), where the output of F is (B.sub.jl , 
X.sub.j2), where X.sub.jl is greater or equal to any X.8ub j for 1 <*i <=n, and X,8ub.J2 is 
greater or equal to any X.sub.i for 1 <M <«n except for i«j1 . 
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- • 6. (Amended) The method according to [any one of clainre 1. 2 or 3] claim 1 . 
for k-th price auctions, where the output of F is (B.sub.jl , X.sub.j2). where X.sub.j1 is 
greater or equal to any X.sub.i for 1 <si oNfi, and X.sub.J2 is tiie k-th largest among all 
inputs XLsubJ for 1 «sj <-n. 

- - 7. (Amended) The method according to [any one of the preceding claims] 
claim 1 wherein the auction is a plural auction where there are a plurality of sellers. 

• - 8. (Amended) The method affording to [any one of the precedir^ daims] 
claim 1 wherem ^e auction a generalized Vidoey auc^n. 

- - 9. (Amended) The method according to [any one of the pr^^ing claims] 
claim 1 . comprising the step of. computing ttie auction such that the auctioneer wants to 
buy an Item and each of the bidders wants to sell this item, and wherein negative values 
of the inputs X.subJ are possible. 

- - 10. (Amended) The method according to [any one of the preceding dalms] 
claim 1 . comprisit^ the step of; computing the output of the auction such that the users 
leam, in additton. some stotistic of ttie inputs, such as. Vne users can team at least one 
of^e average of ttie inputs, ^e ^riance of ttw inputs, or how many one inpute were 
rn a certain range. 

--11. (Amended) The method according to (any one of the preceding daims] 
claim 1 . comprising the step of compulNng the output of the function such that only tfie 
center learns the ou^ut of the function, or sevemi of the users learn the output of the 
fundion, or all the users team the ou^ut of ttie function. 
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- - 12. (Amended) The method according to [any one of the preceding ciaims] 
ciaim 1 > oomprisii^ the step of, computing tiie output of a mechanism, in particuiar, 
for one of Groves-Claric mechantems, opinion polling and stable matching. 

- - 13. (Amended) The method according to [any one of the preceding claims] 
claim 1 . comprising the steps of each user committing to the values of his input in a 
manner that ttie user cannot change it afienwards» but hiding the iru)ut value Itom the 
oenter,[.|at a spectftc stage, the users opening their commitment to their Inputs and 
revealing their vatues to the center, whic^ then onnputes the valine of F in a manner the 
em<^ of the users can v^ify Hiat 0ie vidu^ 0iat were us^ as inputs for oompufing F 
vme the vahies t9iat were ^mmltted to by the users. 

- - 14. (Amended) The method acoonJing to [any one of the preceding claims} 
claim 1 . comprising the step of implementing automated ag^ts which participate in the 
auction which do not disclose to ttie auctioneer the limit price that ttiey were given, until 
the end of the bidding period. 

- - 15. (Amende) The method anording to [any one of ttie pre^ding claims] 
claim 1 . oonqptiteing the step of comraiting a ^nctton where the center can generate a 
proof that it confuted the correct output of the funcibn. 

- - 16. (Amended) The methcxi acoirding to [any orbe of Oie preceding claims] 
claim 1 . comprising ttie step of computing a function by N Deters, such that only if K of 
the N centers collude they can learn information about ttie par^' inputs. 
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17. In a system that contains N parties, each having a private input, and 
a center adapted to compute a function F of said input; apparatus for computing said 
function F in said center, comprising: 

a first program provided in the center that enables calculation of said function 

F; 

clrcuibyfor publishing said function F using ^e program while not revealing 
substantially any information about said input: and 

a eecond program provided to the parties enabling each one of said parties to 
prove that said function F was calculated oirrectly. 
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1 8. ih a system according to claim 1 7, wherein the second program 
precludes the learning of any infonnation other than the function F was calculated 
con-ectly. 

19. In a system according to claim 17, wherein the first program 
includes a construction of K gartled circuits for computing fuf>ction F, 

20. In a system according to claim 17. wherein said parties are bidders 
in an auction; said Input are bids, said center is an auctioneer, said function F is the 
rule by which said auction is decided, whereby the auctioneer is capable of 
calculating the result of said auction without revealing any information about said 
bids, except for the identity of the winning party from among said parties, and the 
amount to pay. 

21. In a system according to claim 20, wherein the function is 
detennined utilizing a circuit of gates. 

22. In a system according to claim 20. wherein the second program 
inciudes the capability of utilizing the circuit of gates to independently detennine and 
verify that the computations of the center are correct. 



